ATTACHMENT B 

Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the 
application. 

1-10 (Cancelled) 

1 1 . (Currently Amended) A method of downloading operating software specific to 
one of a plurality of operators into general-purpose digital television platform of a 
decoder, comprising the steps of: 

storing a boot loader including filter fields specific to the decoder definitively on 
manufacture in a protected and non-rewritable memory zone of the platform; 

periodically broadcasting a message identifying the platform and containing 
operating software making the platform suitable for decoding a data stream of a 
television signal of an operator periodically in a digital television signal that comes from 
each of the operators that made an agreement with a manufacturer of the platform and 
that is designed to be accessible, each of said messages having an electronic 
signature; 

on reception, filtering messages containing the operating software and identifying 
messages containing the operating software and identifying the platform and the 
operator in response to a user selection command, using the filter fields and writing said 
messages into a rewritable program memorvr , and verifying the authenticity of the 
electronic signature; and 

if the signature is verified as being authentic, and if the result of the filtering is 
positive, downloading the operating software in a memory space of the platform. 

1 2. (Original) A method according to claim 1 1 , wherein the operating software is 
transmitted in the form of data to be programmed in said rewritable memory, in the form 
of data blocks each copied at a respective address of the writable memory and supplied 
in the header of the block. 



13. (Original) A method according to claim 12, wherein said data blocks are each 
preceded by a header block comprising a description of the respective application and a 
description of each of the data blocks. 

14. (Original) A method according to claim 13, wherein each said data block 
includes an error correction code. 

15. (Original) A method according to claim 13, wherein the header includes at least 
one of the following fields: 

an identity of the platform manufacturer; 

a hardware version of the platform; 

a mode of acquisition of the decoder by a customer' 

an identity of the current version of the software; and 

an individual serial number of the decoder. 

16. (Currently Amendedl) A method according to claim 122, wherein SI or PSI 
information is associated with each said broadcast message containing operating 
software and said information includes at least one of a plurality of fields selected 
among: 

identity of a manufacturer of the platform; 
hardware version of the platform; 
decoder acquisition mode; 

identity of a current version of software loaded in the platform; and 
an individual serial number of the decoder. 

1 7. (Original) A method according to claim 14, wherein each of the data blocks is 
associated with an encrypted signature included in the header, and in that the header 
itself includes an encrypted signature. 



§18. (Currently Amended) A system for downloading application software into digital 
television decoder platforms, comprising: 

in each of said platforms, a general-purpose processor module that is 
independent of any television operator, that contains identification keys, and that is 
arranged: 

to extract a data stream representing operating software specific to a program 
pack offered by an operator and coming from that one of a plurality of operators that is 
selected at that time by the user, to authenticate that application software by 
implementing the identification keys and 

to record the software in a rewritable program memory for storing said software, 
and to control the decoder to implement the services identified by the software; and 

in a broadcasting station, means for repetitively inserting in a broadcast digital 
data stream both a sequence of blocks representing said application software and 
information describing identification features of only those decoders that are to be 
loaded. 

19. (Currently Amended) An installation according to claim 18, wherein the 
processor module comprises, in addition to the rewritable memory, a processor, a 
volatile memory (36)-that is directly accessible by the processor, and a non-volatile 
memory zone which is protected, not rewritable, and which is protected ag ai st against 
access from the outside. 

20. (Original) An installation according to claim 19, wherein the protected non- 
volatile memory zone is part of a flash memory. 



